Data Security Is an Art, Not Just a Science

LinkedIn Post, by Daniel Solove, Research Professor of Law at GW Law School and Founder of TeachPrivacyFar too often, the mandate for data security is simply to “secure it,” and people often think of data security as a set of clear choices. This is in contrast to privacy, which is understood as a set of muddy policy issues. But data security is, in fact, quite muddy itself. Data security is about risk management. Data security measures can reduce the risk of having a data breach, but these measures have costs. These costs can be financial, but they also can involve efficiency, convenience, and the very culture of an organization.Because humans play a key role in data security, this makes data security quite complicated. Managing human behavior is immensely challenging. People are hard to control. They need to be educated. They need to care. But people forget. They have lapses in judgment. They don’t learn what they’re supposed to learn and don’t do what they’re supposed to do.Read entire post: https://www.linkedin.com/today/post/article/20140129061627-2259773-data-security-is-an-art-not-just-a-science